Let's Encrypt SSL Certificate Idiot's Guide

Post your questions about myQNAPcloud service here.
Post Reply
Tim1023
Starting out
Posts: 12
Joined: Wed Oct 17, 2018 8:02 pm

Let's Encrypt SSL Certificate Idiot's Guide

Post by Tim1023 » Mon Oct 29, 2018 11:16 pm

I'm just in the process of installing my first NAS and just wasted most of my weekend trying to get my own certificate via Let's Encrypt or SSL for Free (which generates certificates from Let's Encrypt). In the end it was dead simple, so I thought I'd write this for other beginners with an easy-to-find title.

It turns out that you don't need to faff around with external sites, SSH, cURL commands, and all of that other frightening-looking stuff. QNAP has kindly integrated everything into apps, but only one of them works!

I assume that you have managed to set up myqnapcloud and have the myqnapcloud app running on your NAS.

1. IGNORE Control Panel/System/Security/Certificate & Private Key as this seems to have a bug. This page can be used later to download your certificate should you need it.
2. Open the myqnapcloud app on your NAS
3. Click on SSL Certificate in the left panel
4. Under Let's Encrypt, hit the Download and Install button
5. Enter your myqnapcloud domain name <yourdomain>.myqnapcloud.com and your email address
6. Select Automatically Renew should you want. Probably best.
7. Click on confirm & wait a little
8. Enjoy all that SSL goodness!

I assume that the above should work in the vast majority of cases. :)
References to help Forum search: https://letsencrypt.org/, https://www.sslforfree.com/
TS-251B, QTS 4.3.5.0723 (2018/10/13), 2 x WD Red 4T SATA, UPS= Cyberpower VALUE600EILCD, NAS backup to external HD stored off-site

aloharaz
New here
Posts: 2
Joined: Wed Sep 17, 2014 2:54 am

Re: Let's Encrypt SSL Certificate Idiot's Guide

Post by aloharaz » Wed Apr 17, 2019 6:47 am

nobody wants to use myqnapcloud **. I want to use my own fixed IP and domain name!!!
qnap.myowndomain.com for example.

User avatar
Toxic17
Experience counts
Posts: 4745
Joined: Tue Jan 25, 2011 11:41 pm
Location: Planet Earth
Contact:

Re: Let's Encrypt SSL Certificate Idiot's Guide

Post by Toxic17 » Wed Apr 17, 2019 3:28 pm

aloharaz wrote:
Wed Apr 17, 2019 6:47 am
nobody wants to use myqnapcloud **. I want to use my own fixed IP and domain name!!!
qnap.myowndomain.com for example.
I suggest you use this then.

viewtopic.php?f=320&t=132911
Regards Simon

QNAP 4.3.x/4.2.x Manuals

QNAP Club Repository
Submit a ticket • QNAP Helpdesk
QNAP Tutorials, User Manuals, FAQs, Downloads, Wiki
When you ask a question, please include the following


MeteoBridge NanoSD • ODROID N2 • FlightAware ProStick Plus
NAS: TVS-463 4.4.1.0998 build 20190715 • TS-459 Pro 4.2.6 build 20190629 • TS-121 4.3.3.0967 build 20190629 • APC Back-UPS ES 700G
QPKG's: TwonkyServer 8.51 • Apache & PHP 7.3.6 • QSonarr 3.0.1.503 • QNBZGet 21.0 • phpMyAdmin 4.8.5 • Qmono 5.20.1.19 • Lychee 3.2.15
Network: VM Hub 3.0 <500/35> • UniFi USG Pro 4 • UniFi USW-16-150W • UniFi USW-8-60W • UniFi CloudKey • UniFi G3-Flex • UAP AC Pro • UAP AC Lite • SLM2008 • Dell 7050 MFF

terrytse
New here
Posts: 2
Joined: Fri Feb 03, 2017 12:21 pm

Re: Let's Encrypt SSL Certificate Idiot's Guide

Post by terrytse » Fri Jun 14, 2019 3:40 pm

use Let's Encrypt SSL Certificate with own domain name

On Qnap
1. Enable Web Server with port 80. Control Panel --> Applications --> Web Server
2. Ensure Qnap System port is not using port 80. Control Panel --> System --> General Setting --> System Port is not port 80

On your router
3. create a port forward rule, forward external port 80 to internal port 80, server is your qnap

On you Browser
4. test web access to your qnap public ip or FQDN, http://your_qnap_ip:80
5. make sure it will not redirect to your Qnap admin login page

On Qnap
6. download and install Let's Encrypt SSL Cert, Control Panel --> System --> Security --> Certificate & Private Key, click "Replace Certificate" --> get from Let's Encrypt
7 . enter your own domain name qnap.myowndoamin.com and your email address


i am able to install Let's Encrypt SSL Cert by doing above.


** tested enable "force secure connection (HTTPS) only" under Control Panel --> System --> General Setting, seem it will break

SenseoHasser
Starting out
Posts: 23
Joined: Sat Jan 03, 2009 1:21 am

Re: Let's Encrypt SSL Certificate Idiot's Guide

Post by SenseoHasser » Wed Jul 03, 2019 5:16 am

Thanks for this guide!

Is there a way to auto-renew the certificate?

kirilly
New here
Posts: 2
Joined: Sun Mar 31, 2019 11:37 am

Re: Let's Encrypt SSL Certificate Idiot's Guide

Post by kirilly » Thu Jul 18, 2019 6:43 am

Hi, I've managed to trick Chrome SSL using local network address with Let's Encrypt certificate + editing hosts (making "https" icon NOT crossed out ie. certificate considered valid):
1.Followed "Let's Encrypt SSL Certificate Idiot's Guide" by using myqnapcloud (I have error by missing port 80 etc. with Control Panel --> Applications --> Web Server)

2.Added to hosts file:

Code: Select all

192.168.1.2:443 my-id.myqnapcloud.com
(or whatever your local NAS IP and port is)

3.Followed the URL:

Code: Select all

https://my-id.myqnapcloud.com:443
Hope this will help!

Post Reply

Return to “myQNAPcloud service”